【问题标题】:unable to verify the first certificate proxy nginx无法验证第一个证书代理 nginx
【发布时间】:2018-12-11 17:15:57
【问题描述】:

我正在配置 nginx,前端和后端一起使用同一个域,例如

my-domain.com -> 前端

my-domain.com/api/ -> 后端。

运行 HTTP 时运行正常,但我配置的是 https,它没有运行第一个请求。不知道怎么回事。

前端我用的是 NextJs,SSR 框架

我正在使用isomorphic-unfetch 请求。

请帮助我,谢谢。

upstream customer-ssr {
    server 127.0.0.1:3030;
    keepalive 64;
}

server {
    listen 80;
    server_name  my-domain.com www.my-domain.com;
    return 301 https://my-domain.com$request_uri;
}

server {
    listen 443 ssl http2;
    server_name www.my-domain.com;
    return 301 $scheme://my-domain.com$request_uri;
}

server {
    listen 443 ssl http2 default_server;
    listen [::]:443 ssl http2 default_server;

    server_name my-domain.com;

    root     /home/my-domain/my-domain-web/current;

    ssl_certificate /etc/nginx/ssl/my-domain.com.crt;
    ssl_certificate_key /etc/nginx/ssl/my-domain.com.key;
    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         HIGH:!aNULL:!MD5;
    add_header          Strict-Transport-Security "max-age=31536000; includeSubdomains";

    location / {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-NginX-Proxy true;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_max_temp_file_size 0;
        proxy_pass http://customer-ssr;
        proxy_redirect off;
        proxy_read_timeout 240s;
    }

    location /api/ {
       proxy_buffering       off;
       proxy_set_header      Host              $proxy_host;
       proxy_set_header      X-Real-IP         $remote_addr;
       proxy_set_header      X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header      X-Forwarded-Proto $scheme;
       proxy_pass            http://110.95.104.901:8888;
    }
}

【问题讨论】:

标签: ssl nginx nextjs


【解决方案1】:

在你的 main(index/server).js 文件上写下这一行:

/**
 * Handle UNABLE_TO_VERIFY_LEAF_SIGNATURE error
**/
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

【讨论】:

    猜你喜欢
    • 2021-10-20
    • 1970-01-01
    • 2021-01-02
    • 2020-02-17
    • 2021-03-26
    • 1970-01-01
    • 2018-08-29
    • 2020-03-29
    • 2021-06-15
    相关资源
    最近更新 更多